[Samba] Setting up LDAP Authentification - Tree design/search scope

[Götz Reinicke - IT-Koordinator]

Adam Tauno Williams schrieb:
<...>
>>> Aside: Although in the end I think you'll find LDAP makes a very crappy
>>> addressbook soluton.
>> Why that? For us e.g the purpose of the addressbook is to have name and
>> e-mail-address available; postal Address, phonenumber etc should not be
>> in our directory.
> 
> (a) No client but Evolution supports write access.   This shortly equals
> unhappy users.
> (b) Clients blithely ignore schema rules [for example "mail" is
> multi-valued]
> (c) How clients map attributes to fields varies widely [and who ever
> wrote the Mozilla addressbook's LDAP support was using hard-drugs at the
> time]
> 
> If you really want nothing more than to expose e-mail addresses it works
> reasonably well.  It is pretty terrible once you go beyond that.
> 

Hi, thanks for sharing your thoughts.

For us the addressbook should be a look-up read only directory. Anything
else is far beyond my project scope.

Regards,

	Götz
-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 420
Fax  +49 7141 969 55 420
E-Mail goetz.reinicke at filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016
Vorsitzende des Aufsichtsrats:
Prof. Dr. Claudia Hübner
Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium

Geschäftsführer:
Prof. Thomas Schadt